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IN THE CLAIMS ; 

A listing of the status of all claims 1-20 in the present 
patent application is provided below. 

1 (Previously Presented) . A parallelizable integrity-aware 
encryption method, the method comprising the steps of: 

whitening at least one message block with a first mask 

value; 

encrypting the at least one whitened message block using 
a block cipher and a first key; and 

whitening the at least one encrypted message block with a 
second mask value, which is not identical to the first mask 
value, to generate at least one corresponding output ciphertext 
block; 

wherein the first mask value is computed by applying a 
XOR function to a first value derived from a NONCE value and a 
second value derived from encrypting a third value using the 
block cipher and a second key, and then applying a substitution 
function to the result of the XOR function; 

wherein the first and second key have different values; 

wherein the second mask value is computed by applying a 
XOR function to a fourth value derived from the NONCE value and 
a fifth value derived from encrypting a sixth value using the 
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block cipher and the second key, and then applying the 

substitution function to the result of the XOR function. 

2 (Cancelled) 

3 (Previously Presented) , The method of claim 1, wherein the 
first and fourth values derived from the NONCE value are 
permutations of a binary value computed by encrypting the NONCE 
value using the block cipher and the first key. 

4 (Previously Presented) . The method of claim 1, wherein the 
third and sixth values are unique counter values or random 
numbers . 

5 (Previously Presented) . The method of claim 1, wherein the 
steps of whitening each comprise the step of applying a XOR 
function. 

6 (Original) . The method of claim 1, further comprising the 
steps of: 

applying a XOR function to all message blocks of a message 
to compute a XOR-sum; 

applying a third mask value to the XOR-sum; 
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encrypting the masked XOR-sum using the block cipher and 
the first key; and 

applying a fourth mask value to the encrypted XOR-sum to 
generate an integrity tag, 

7 (Previously Presented). The method of claim 6, wherein the 
third mask value is computed by applying a XOR function to a 
first value derived from a NONCE value and a second value 
derived from encrypting a third value using the block cipher and 
a second key, and then applying a substitution function to the 
result of the XOR function, wherein the fourth mask value is 
computed by applying a XOR function to a fourth value derived 
from the NONCE value and a fifth value derived from encrypting a 
sixth value using the block cipher and the second key, and then 
applying the substitution function to the result of the XOR 
function. 

8 (Previously Presented) . The method of claim 1, further 
comprising the steps of: 

whitening the at least one output ciphertext block with the 
second mask value; 

decrypting the at least one whitened ciphertext block using 
a block cipher and the first key; and 
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whitening the at least one decrypted block with the first 

mask value to generate at least one corresponding message block. 

9 (Original) . The method of claim 1, wherein the block cipher 
is selected from the group consisting of: an Advanced 
Encryption Standard (AES) block cipher, a Data Encryption 
Standard (DES) block cipher, and a Triple Data Encryption 
Standard (3DES) block cipher. 

10 (Previously Presented) . The method of claim 1, wherein the 
second and fifth values are elements of a vector. 

11 (Previously Presented) . At least one processor readable 
medium for storing a computer program of instructions configured 
to be readable by at least one processor for instructing the at 
least one processor to execute a computer process for performing 
the method as recited in claim 1. 

12 (Original) . A parallelizable integrity-aware encryption 
method, the method comprising the steps of : 

applying a XOR function to all blocks of a message to 
compute a XOR- sum; 

applying a first mask value to the XOR-sum; 
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encrypting the masked XOR-sum using a block cipher and a 

first key; and 

applying a second mask value to the encrypted XOR-sum to 
generate an integrity tag. 

13 (Previously Presented) . The method of claim 12, wherein the 
first mask value is computed by applying a XOR function to a 
first value derived from a NONCE value and a second value 
derived from encrypting a third value using the block cipher and 
a second key, and then applying a substitution function to the 
result of the XOR function, wherein the second mask value is 
computed by applying a XOR function to a fourth value derived 
from the NONCE value and a fifth value derived from encrypting a 
sixth value using the block cipher and the second key, and then 
applying the substitution function to the result of the XOR 
function. 

14 (Previously Presented) . The method of claim 13, wherein the 
first and fourth values derived from the NONCE value are 
permutations of a binary value computed by encrypting the NONCE 
value using the block cipher and the first key. 

15 (Previously Presented). The method of claim 12, further 

6 

57983.000164 EMF_US 26105889vl 



U.S. Patent Application No.; 10/772,433 
Attorney Docket No.: 57983.000164 
Client Reference No.: 16404ROUS01U 

comprising the steps of: 

whitening at least one message block with a third mask 
value; 

encrypting the at least one whitened message block using 
the block cipher and the first key; and 

whitening the at least one encrypted message block with the 
third mask value to generate a corresponding output ciphertext 
block, 

16 (Original) . The method of claim 15, wherein the steps of 
whitening each comprise the step of applying a XOR function. 

17 (Original) . The method of claim 15, wherein the third mask 
value is computed by applying a XOR function to a first value 
derived from a NONCE value and a second value derived from 
encrypting a third value using the block cipher and a second 
key, and then applying a substitution function to the result of 
the XOR function. 

18 (Original). The method of claim 12, wherein the block cipher 
is selected from the group consisting of: an Advanced Encryption 
Standard (AES) block cipher, a Data Encryption Standard (DES) 
block cipher, and a Triple Data Encryption Standard (3DES) block 
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cipher. 



19 (Previously Presented). The method of claim 13, wherein the 
second and fifth values are elements of a vector, 

20 (Previously Presented) . At least one processor readable 
medium for storing a computer program of instructions configured 
to be readable by at least one processor for instructing the at 
least one processor to execute a computer process for performing 
the method as recited in claim 12. 
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